QuillAudits primary sources — 2026-05-02

Project status in this pass

• No canonical standalone whitepaper or litepaper surfaced.
• The clearest current source of truth is the official site, the QuillAudits / Quillhash GitHub organization and audit-report repository, the public exploit-research pages, and the first-party education/resource repositories.

Primary-source snapshots

1) Official homepage

• URL: https://www.quillaudits.com/
• Key excerpt:
  • Frames QuillAudits as securing Web3 protocols across the full lifecycle using design security, AI-driven risk detection, adversarial audits, operational review, and post-audit monitoring.
  • Explicitly lists design-security advisory work, threat modeling, vulnerability scanning, smart-contract and protocol audits, operational-security review, and live monitoring.
  • Notable because it positions the company as a broader security platform rather than a narrow report vendor.

2) Official GitHub organization

• URL: https://github.com/quillaudits
• Key excerpt:
  • Describes QuillAudits as a leading smart-contract audit firm and claims 1500+ projects audited, 1M+ lines of code audited, and acceptance by 50+ exchanges.
  • Links directly to the public audit-report repository and highlights the H1 2025 crypto-exploits report.
  • Important because it ties the brand to a persistent public artifact set, not just a marketing site.

3) Public audit-reports repository

• URL: https://github.com/Quillhash/QuillAudit_smart_contract_audit_Reports
• Key excerpt:
  • Presents a dedicated first-party repository for public smart-contract audit reports.
  • Says QuillAudits uses both manual and automated methodologies and evaluates security robustness, documentation alignment, gas optimization, and code quality.
  • Important because the report corpus is itself a durable infrastructure surface for the firm.

4) H1 2025 crypto exploits report

• URL: https://www.quillaudits.com/reports/crypto-exploits-h1-report-2025
• Key excerpt:
  • Says roughly $2.3B was lost in H1 2025, exceeding the total loss for 2024.
  • Says access-control attacks caused more than $1.6B in losses and identifies Bybit, a large individual bitcoin theft, and Cetus among the major incidents.
  • Important because it shows QuillAudits operates a public exploit-research and security-intelligence layer beyond audits.

5) Smart Contract Auditor Roadmap repository

• URL: https://github.com/Quillhash/QuillAudit_Smart_contract_Auditor_Roadmap
• Key excerpt:
  • Publishes a structured roadmap for becoming a smart-contract auditor.
  • Curates learning material across Ethereum, Solidity, proxy patterns, attack vectors, DeFi, fuzzing tools, audit reports, newsletters, and communities.
  • Important because it shows QuillAudits is training and curating an auditor pipeline, not just selling audit engagements.

6) Solidity Attack Vectors repository

• URL: https://github.com/Quillhash/Solidity-Attack-Vectors
• Key excerpt:
  • Describes itself as a maintained list of Solidity smart-contract attack vectors collected from sources like the SWC Registry and DASP-style vulnerability references.
  • Invites community pull requests for missing attack vectors.
  • Important because it demonstrates first-party public security-knowledge maintenance.

7) Web3 Security Tools repository

• URL: https://github.com/Quillhash/Web3-Security-Tools
• Key excerpt:
  • Curates a large index of blockchain forensics, auditing, fuzzing, visualization, and wallet-security tools.
  • Groups resources by investigative, auditing, and wallet-security use cases.
  • Important because it adds a resource-index / ecosystem-curation layer to the QuillAudits footprint.

8) Academy / CTF pages

• URLs:
  • https://www.quillaudits.com/academy
  • https://www.quillaudits.com/academy/ctf
• Key excerpt:
  • The page titles expose first-party “QuillAcademy” and “QuillCTF” surfaces.
  • Even though this pass recovered limited body text, these branded learning pages reinforce that education is an intended product surface and not only an incidental GitHub side project.

Working conclusion

QuillAudits is best cataloged as security-and-education infrastructure with a substantial public audit-report layer. The combination of lifecycle security services, a public audit corpus, exploit-research reporting, and multiple first-party training / reference repositories makes it broader than a conventional audit boutique.